Reboots with a 0x8e

[keithm16168]

Hi everyone

I came across this forum while googling for help with the below problem and it looked like people on here have experienced similar issues and the advise they got looked really useful so I was hoping you might be able to help me out too?

PC SPEC

OS: Windows XP service pack 2
Motherboard: V266B VT8366-8233 (revision 3.0)
Bus clock: 133Mhz
BIOS: Award Software International Inc 6.00 PG 08/22/2002
Sound: integrated AC’97 2.1 CODEC on board
Processor: 1.53GHz AMD Athlon XP (128K primary & 256K secondary cache)
RAM: 256MB installed memory, slot A0 empty.
PSU: 400W Mercury K0B AP4400X CE
Hard drive: 40GB Seagate Barracuda ATA ST340016A
Network: none
Graphics: NVIDIA GeFORCE4 MX440/64MB+TV

BACKGROUND

This is a custom built PC that some one has given me to try and fix.
581863
PROBLEM

Rebooting on a regular basis.

No blue screen just reboots and a bugcheck is generated in the event log.

There have been four different error codes generated

0x1000008e
(0xc0000005, 0xf6fc3a5c, 0xf6fc39e8, 0x00000000)
(0xc0000005, 0xf5cf4858, 0xf5cf47e4, 0x00000000)
(0xc0000005, 0x804e8a3e, 0xf53ad564, 0x00000000)
(0xc0000005, 0xf5da4850, 0xf5da47dc, 0x00000000)
(0xc0000005, 0xf62cb858, 0xf62cb7e4, 0x00000000)
(0xc0000005, 0xf6af183c, 0xf6af17c8, 0x00000000)
(0xc0000005, 0x00000000, 0xf5e91788, 0x00000000)
(0xc0000005, 0x00000050, 0xf5e3d424, 0x00000000)
(0xc0000005, 0x00000000, 0xf650f788, 0x00000000)
(0xc0000005, 0x00000000, 0xf604f788, 0x00000000)
0x100000d1
(0x00000000, 0x00000002, 0x00000000, 0x00000000)
0x1000000a
(0x867b94f0, 0x00000002, 0x00000001, 0x804eb5e5)
0x1000007f
(0x00000008, 0x80042000, 0x00000000, 0x00000000)

I've attached the two most recent minidumps, more to follow if necessary, not sure how many you can attach?

The machine has previously been infected with trojan.anserin, which was picked up by Norton, but I believe it was cleaned off.

Also the owner reports that they have had stop bugchecks indicating hardware and driver issues.

AVG was installed at one point when it was believed that Norton was the cause of the problem, but it appears that Norton was not fully uninstalled when this was done.

The system has been flattened and reinstalled several times but the problem has persisted suggesting that this is most likely a hardware issue.

WHAT I HAVE TRIED

Uninstalled Norton Security and AVG 7.5 free version as google mentioned something about these errors sometimes be caused by Anti-virus software.
Suspected possible corruption of a driver or the operating system and therefore attempted to reinstall Windows XP. Got to the point where it asks you if you want to overwrite the existing partition and it rebooted with a 0x8e which now leads me to believe it’s hardware related, but I freely admit I’m a novice at this kinda stuff?

Scan disk has shown no problems with the hard drives.

Ran memtest86+ for 24hours without any issues.

There’s no network card in the machine but I’ve managed to get round this by plugging my USB pen drive in so I could pull the minidumps off. There were 31 in total, I’ve created a winrar archive but it’s 444KB which I believe is way over the 100K limit you guys have for the posts, maybe I should post the most recent?

I’ve installed Debugging Tools for Windows on my laptop, dbg_x86_6.7.05.1, and downloaded symbols,

WindowsXP-KB835935-SP2-Debug-slp-Symbols
WindowsXP-KB835935-SP2-slp-Symbols,

The plan being to use it to analyse the above minidumps, I’m just starting to get to grips with it and would appreciate any help or advise on how to use it. One thing I have managed to glean is the system was booted /NODEBUG. Which is says is not supposed to happen and suggests I get a debugger gets connected, and the system is booted /DEBUG. Which will show why this breakpoint is happening. Wish me luck on that one 

I’ve created a Excel spreadsheet of all the bugchecks along with the dates they occurred, since the 22nd August there have been 67 bugchecks, it’s amazing what you do when your bored. 

Found the following site useful for info on the motherboard, http://www.jetway.com.tw/oldweb/evisn/product/amd/v266b/v266b.htm

I’ve downloaded the latest BIOS, but haven’t installed one before so I’m a bit wary of jumping straight in, especially when it’s someone else’s machine, though I have managed to get hold of a copy of the motherboard manual from http://www.machspeed.com/manuals/VIPER/V266B.pdf

 

[Tmagic650]

Win32k.sys is in both minidumps... Turn off Automatic Restart if it is enabled. This minidump call is very generic, denoting an unstable system.

"NVIDIA GeFORCE4 MX440/64MB+TV"... NVIDIA+Windows= UNSTABLE

Are all the Windows Updates current? What make is the motherboard? You gave me the chipset. This chipset was used in many boards. Also, the system could still be infected with spyware and malware

 

[peterdiva]

The info I'm getting on asc3550u.SYS is that it's a Trojan. It's unloaded so there's no timestamp available. I suggest you start HERE.

f6b33000 f6b45000 asc3550u.SYS Timestamp: unavailable (00000000) Checksum: 00000000

 

[keithm16168]

MOTHERBOARD The motherboard is a Jetway V266B rev 3.0, I have managed to get hold of a copy of the motherboard manual from http://www.machspeed.com/manuals/VIPER/V266B.pdf

WINDOWS UPDATES the system has been flattened and reinstalled prior to the machine being handed to me, it looks like they ran windows update afterwards, however i have been unable to confirm it's fully up to date as it doesn't have NIC in it I will be fitting one at the weekend and will confirm then

there's no

 

[keithm16168]

STOP: 0x000000D1 - NDIS.sys – Address F98AEBEF base at F9898000, DateStamp 41107ec3

Ok, the story so far...

I've installed a network card, then installed Spybot 1.5 and AVG free 7.5,

A scan with Spybot picked up 109 instances of spyware which have now all been cleared

Did a full scan using AVG no viruses found

Ran windows update, but it wouldn't let me install the Windows Genuine Advantage Validation Tool (KB892130) update, I'm assuming this is a genuine copy of XP as an XP disc came with the machine, how do I go about finding if a the copy of Windows XP installed is genuine?

I haven’t removed the graphics card as there appears to be no onboard graphics to replace it with, could anyone recommend a suitable replacement that might be a bit more stable?

Finally I've turned off automatic restart, and set XP to do a full memory dump when it crashes, then the next time it rebooted I got the following:

A problem has been detected and windows has been shut down to prevent damage to your computer.

DRIVER_IRQL_NOT_LESS_OR_EQUAL

If this is the first time you’ve seen this stop error screen, restart yoiur computer. If this screen appears again, follow these steps:

Check to make sure any new hardware or software is properly installed. If this is a new installatioh, ask your hardware or software manufacturer for any Windows updates you might need.

If problems continue, disable or remove any newly installed hardware or software. Disable BIOS memory options such as caching or shadowing. If you need to use Safe mode to remove or disable components, restart your computer, press F8 to select Advanced Startup options, and then select Safe Mode.

Technical information:

*** STOP: 0x000000D1 (0x00000008, 0x00000002, 0x00000000, 0xF98AEBEF)

*** NDIS.sys – Address F98AEBEF base at F9898000, DateStamp 41107ec3

Beginning dump of physical memory
Physical memory dump complete.
Contact your system administrator or technical support group for further assistance.

The above generated a MEMORY.DMP file in C:\WINDOWS, which was 261,708KB in size and I haven’t got a clue what to do with it, I'm presuming I wont be able to attach it as it's over the 100K limit for attachments?

However I have attached the 3 latest minidumps generated while carrying out the above.

 

[Tmagic650]

You still have a very sick computer... Spyware and malware can do as much or more damage than a virus. The latest minidumps point this out:

RTL8139.sys points to a Realtek audio driver fault

NDIS.sys points to a network adapter driver fault

and

Rundll32.exe (invalid context) points to further spyware infection

 

[sghiznaneck]

It may be best to reload Windows. That way, whatever problems ytou may have will disappear.

 

[Tmagic650]

Once again please read and follow this advice and instructions:

https://www.techspot.com/vb/topic65943.html